<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<META content="MSHTML 6.00.6000.16544" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>I'v put the localhost on source, but it's an error, i change it for the Ip adress of the nic that i connect to the tap.</DIV>
<DIV> </DIV>
<DIV>But syslog call from remote server continu to goes in the /var/log/message instead of /var/log/SPSSOWL1/$YEAR/$MONTH/$DAY/$HOST.log"<BR></DIV>
<DIV>Like it's configure in the syslog-ng.conf.</DIV>
<DIV> </DIV>
<DIV>Do you want i paste here my syslog-ng.conf ? (i only change source net { udp(ip(127.0.0.1) port(514)); }; for source net { udp(ip(192.168.33.8) port(514)); };</DIV>
<DIV> </DIV>
<DIV><BR> </DIV>
<DIV> </DIV>
<DIV>Francis Provencher<BR>Ministère de la Sécurité publique du Québec<BR>Direction des technologies de l'information<BR>Division de la sécurité informatique<BR>Tél: 1 418 646-3258<BR>Courriel: <A href="mailto:Francis.provencher@Msp.gouv.qc.ca">Francis.provencher@Msp.gouv.qc.ca</A><BR> <BR>CEH - Certified Ethical Hackers<BR>SSCP - System Security Certified Practitionner<BR>Sec+ - Security +</DIV></BODY></HTML>